This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a3230303a3a2f34302d3438203d3e20323135313732.roa File: 326130663a316363353a3230303a3a2f34302d3438203d3e20323135313732.roa (raw, json) Hash identifier: Dt8cOVnvL9C5zfAE9YJN2xwNYI64ZwV47W+KXS8CoL4= Subject key identifier: CD:BF:C8:01:34:A7:2F:AC:79:18:1E:F7:9C:EF:B6:28:CE:5A:04:60 Certificate issuer: /CN=75a838e02c61800f73d3019de0a51f567b64bc0e Certificate serial: 5590767CC43BDD6F58DEF83788C73205D53F4AFC Authority key identifier: 75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a3230303a3a2f34302d3438203d3e20323135313732.roa Signing time: Tue 25 Nov 2025 08:15:19 +0000 ROA not before: Tue 25 Nov 2025 08:10:19 +0000 ROA not after: Tue 24 Nov 2026 08:15:19 +0000 asID: 215172 IP address blocks: 2a0f:1cc5:200::/40 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.mft rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 15:09:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:90:76:7c:c4:3b:dd:6f:58:de:f8:37:88:c7:32:05:d5:3f:4a:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75a838e02c61800f73d3019de0a51f567b64bc0e Validity Not Before: Nov 25 08:10:19 2025 GMT Not After : Nov 24 08:15:19 2026 GMT Subject: CN=CDBFC80134A72FAC79181EF79CEFB628CE5A0460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f0:c7:f8:f6:61:2e:68:f7:65:8f:bd:8b:1f: 59:b6:5e:1a:20:e1:c8:be:66:b3:04:ff:d0:07:09: 1a:50:b0:be:d4:e1:6f:fe:25:27:c4:c1:c1:e6:0b: 8e:5d:a3:08:44:34:d1:f2:d4:df:da:31:a0:c3:d4: 26:48:8d:8f:f6:d8:6a:14:5f:55:d4:c3:1c:79:d8: f0:d3:2d:97:22:50:78:6c:71:00:af:4c:f5:97:d4: 52:6c:ee:0d:84:74:a0:47:19:5f:7d:4e:18:9d:4c: c6:83:9e:74:26:a2:db:a2:09:a3:36:0e:7e:ba:71: 23:b3:e7:f7:15:c5:8c:bb:49:fd:75:cf:9c:86:2b: 0f:2d:0a:b4:18:4c:bb:46:4c:ac:d9:aa:c3:f9:3c: cf:bd:2b:dc:a0:32:e5:1a:47:f5:94:7b:b3:e1:3e: 68:d5:c5:a1:b6:b0:f6:5c:69:19:55:ca:37:4e:43: 30:54:a8:fe:a4:92:c6:fc:e6:18:0e:94:a0:6a:0a: 78:5f:01:e4:6f:26:64:7b:8b:09:3e:c4:68:b7:a0: 24:c7:7c:8c:d8:f1:61:c8:24:9d:e7:10:db:e1:1d: 9b:6f:1f:40:28:99:92:02:18:67:5f:7d:67:c8:8c: 86:42:0c:1f:ee:d8:b6:f6:a6:53:e7:a8:d5:83:80: 80:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:BF:C8:01:34:A7:2F:AC:79:18:1E:F7:9C:EF:B6:28:CE:5A:04:60 X509v3 Authority Key Identifier: keyid:75:A8:38:E0:2C:61:80:0F:73:D3:01:9D:E0:A5:1F:56:7B:64:BC:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/326130663a316363353a3230303a3a2f34302d3438203d3e20323135313732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:1cc5:200::/40 Signature Algorithm: sha256WithRSAEncryption 9c:9c:3f:d2:53:dc:e4:8e:c1:2d:c8:58:d4:66:1b:e3:a7:1b: 95:ec:29:11:dc:e1:3f:19:fe:fc:7f:4b:df:5a:75:25:f0:ec: 06:3e:e8:d6:6f:d7:b6:ec:f2:f2:0c:49:ac:a9:58:f0:80:71: 18:20:fd:7f:f2:c2:23:92:e6:be:a7:c3:51:b6:cf:19:9a:ef: 66:a5:4a:a3:c0:e5:e9:46:86:0f:a0:cb:02:1e:ea:79:80:16: 7a:73:4a:75:d9:93:c9:f6:a6:95:0e:61:ad:2f:f3:5b:2a:e4: d6:07:2a:9f:38:5b:4c:c9:c6:bc:e6:69:bd:b2:67:92:81:4e: d1:37:25:08:af:34:8a:e2:5f:59:7c:63:33:a1:f2:0a:83:11: c3:3b:c8:6c:50:e4:ae:5c:a2:89:ba:09:47:7b:22:84:8f:1c: b1:64:1b:48:0a:25:ac:f3:b6:51:c3:e4:e0:b4:64:b6:55:d0: f4:a6:63:61:5b:63:f4:aa:53:38:be:10:48:dc:85:e7:77:7c: b6:ea:8e:08:f3:79:a8:8c:bc:34:18:83:fa:4a:55:e4:b7:a0: 64:d6:1e:44:27:00:78:41:cc:7b:52:e8:0d:75:c0:76:5b:43: 02:fa:0e:3b:60:51:a4:8b:8d:7b:c2:4f:d4:19:b8:b3:5e:c0: f7:dc:f9:f7 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUVZB2fMQ73W9Y3vg3iMcyBdU/SvwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzVhODM4ZTAyYzYxODAwZjczZDMwMTlkZTBhNTFmNTY3 YjY0YmMwZTAeFw0yNTExMjUwODEwMTlaFw0yNjExMjQwODE1MTlaMDMxMTAvBgNV BAMTKENEQkZDODAxMzRBNzJGQUM3OTE4MUVGNzlDRUZCNjI4Q0U1QTA0NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC88Mf49mEuaPdlj72LH1m2Xhog 4ci+ZrME/9AHCRpQsL7U4W/+JSfEwcHmC45dowhENNHy1N/aMaDD1CZIjY/22GoU X1XUwxx52PDTLZciUHhscQCvTPWX1FJs7g2EdKBHGV99ThidTMaDnnQmotuiCaM2 Dn66cSOz5/cVxYy7Sf11z5yGKw8tCrQYTLtGTKzZqsP5PM+9K9ygMuUaR/WUe7Ph PmjVxaG2sPZcaRlVyjdOQzBUqP6kksb85hgOlKBqCnhfAeRvJmR7iwk+xGi3oCTH fIzY8WHIJJ3nENvhHZtvH0AomZICGGdffWfIjIZCDB/u2Lb2plPnqNWDgID5AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUzb/IATSnL6x5GB73nO+2KM5aBGAwHwYDVR0j BBgwFoAUdag44CxhgA9z0wGd4KUfVntkvA4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTI2ZWIxMzYtNGZlNS00ZTYxLWE0ZDgtZjM0NWY1MmJj MjVkLzAvNzVBODM4RTAyQzYxODAwRjczRDMwMTlERTBBNTFGNTY3QjY0QkMwRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RhZzQ0Q3hoZ0E5ejB3R2Q0S1VmVm50 a3ZBNC5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZTI2ZWIxMzYt NGZlNS00ZTYxLWE0ZDgtZjM0NWY1MmJjMjVkLzAvMzI2MTMwNjYzYTMxNjM2MzM1 M2EzMjMwMzAzYTNhMmYzNDMwMmQzNDM4MjAzZDNlMjAzMjMxMzUzMTM3MzIucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4E AgACMAgDBgAqDxzFAjANBgkqhkiG9w0BAQsFAAOCAQEAnJw/0lPc5I7BLchY1GYb 46cblewpEdzhPxn+/H9L31p1JfDsBj7o1m/Xtuzy8gxJrKlY8IBxGCD9f/LCI5Lm vqfDUbbPGZrvZqVKo8Dl6UaGD6DLAh7qeYAWenNKddmTyfamlQ5hrS/zWyrk1gcq nzhbTMnGvOZpvbJnkoFO0TclCK80iuJfWXxjM6HyCoMRwzvIbFDkrlyiiboJR3si hI8csWQbSAolrPO2UcPk4LRktlXQ9KZjYVtj9KpTOL4QSNyF53d8tuqOCPN5qIy8 NBiD+kpV5LegZNYeRCcAeEHMe1LoDXXAdltDAvoOO2BRpIuNe8JP1Bm4s17A99z5 9w== -----END CERTIFICATE-----Generated at Sat Dec 6 07:42:03 2025 by rpki-client